Smoke test suite & health check

GET /api/health returns status/timestamp/version. scripts/smoke-test.sh checks 10 URLs against production. npm run smoke:prod for post-deploy verification.